General
- Target MasonClient.exe
- Size 48KB
- Sample260422-j56fmsft2v
- SHA256 380b3a029ab0906718ef03b7a9efe2c96c07466c3d4ecf35b852fe0dfb9a936f
- MD5 c5e5a5cb5cee88b2c9748be98971bad5
- SHA1 a8decf5c50f108c109bf8a144a39eada0c15ca76
- SHA512 4306bccf2d3f15dcab3d923ad66a61d2231811a01e82bb30f58953bc83f3d5e9477c7b6720cb4517150ca5f328b29dbf70a3dfb22796e6c1f53d12de7ddb9629
- SSDEEP 1536:H7QZPtUxf3UNUeOWUqmFvtmrXOcYXOcDXOchXOcAXOc1YViOUOfUk+KmNbmvXOcy:H7QZPtUxf3UNUeOWUJptmrXOcYXOcDXw
- TLSH T1E023D78DE7D55121D6BF5EB249B31208C3B07AD34917C62F7CD801DB2B26B988681BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MasonClient.exe
Resource
win10v2004-20260130-en
13 signatures
600 seconds
Behavioral task
behavioral2
Sample
MasonClient.exe
Resource
win11-20260130-en
7 signatures
600 seconds
Malware Config
Targets
-
- Target MasonClient.exe
- Size 48KB
- SHA256 380b3a029ab0906718ef03b7a9efe2c96c07466c3d4ecf35b852fe0dfb9a936f
- MD5 c5e5a5cb5cee88b2c9748be98971bad5
- SHA1 a8decf5c50f108c109bf8a144a39eada0c15ca76
- SHA512 4306bccf2d3f15dcab3d923ad66a61d2231811a01e82bb30f58953bc83f3d5e9477c7b6720cb4517150ca5f328b29dbf70a3dfb22796e6c1f53d12de7ddb9629
- SSDEEP 1536:H7QZPtUxf3UNUeOWUqmFvtmrXOcYXOcDXOchXOcAXOc1YViOUOfUk+KmNbmvXOcy:H7QZPtUxf3UNUeOWUJptmrXOcYXOcDXw
- TLSH T1E023D78DE7D55121D6BF5EB249B31208C3B07AD34917C62F7CD801DB2B26B988681BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1